Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
File:                     d7tRRrULW8gaNXR6K75lKqC3Fnw.cer (raw, json)
Hash identifier:          ASqF439oHkTml5Y5DS4c+gQHPDuFICk+Nd/DuURSzeM=
Subject key identifier:   77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747810326138D60E51E25CF222C0B8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198450
                          IP: 91.224.244.0/23
                          IP: 2001:67c:2134::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:81:03:26:13:8d:60:e5:1e:25:cf:22:2c:0b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:7c:72:90:51:b7:09:21:2b:0f:f3:85:1f:
                    72:a3:7c:80:87:dd:bb:19:19:80:48:86:3f:44:bd:
                    40:5b:09:ca:5b:c2:0e:48:d5:86:2c:db:9d:60:8f:
                    e7:fd:fc:7b:3c:67:ba:4e:f0:53:8a:a9:12:a7:1b:
                    bc:4f:ed:8b:cb:f1:4e:11:a1:34:62:9a:4c:32:fc:
                    05:a4:33:83:66:78:39:3c:1d:39:b4:61:8d:24:83:
                    0c:a1:bb:2f:33:b4:dd:be:35:11:75:7c:9b:3c:85:
                    71:7e:6e:ac:c5:20:e8:d0:74:48:a4:8d:d2:84:a5:
                    32:36:07:8f:0f:33:17:56:18:b7:5f:f7:f8:2e:d4:
                    5e:fa:f3:2c:95:8a:2d:87:d9:4d:23:6a:d1:a1:b9:
                    e9:ce:fd:75:ba:f6:24:90:d3:05:49:96:5d:05:0a:
                    4d:6c:6e:25:01:cc:0a:cb:7e:14:ee:40:86:59:73:
                    94:e0:66:7b:12:e1:39:fd:39:92:fa:6f:11:55:69:
                    d8:e2:56:3c:6b:6f:dc:e4:3d:2c:c2:ac:09:04:2f:
                    79:64:fb:a6:be:d2:0d:ed:37:cf:1f:f1:0b:f9:6c:
                    36:ba:c7:73:ee:95:ae:62:f5:3b:e6:b4:9c:2a:69:
                    da:ed:3f:28:fc:5f:ca:4d:c7:0f:10:20:1d:0e:50:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.244.0/23
                IPv6:
                  2001:67c:2134::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198450

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:23:0a:1f:2d:b6:30:02:9e:74:ad:da:28:ce:8c:09:0a:
         df:ba:9e:ee:ed:86:cc:5c:f4:47:7e:9c:63:7c:1b:f2:6b:7d:
         bb:07:49:fa:7c:bb:14:59:66:16:f4:1b:94:df:4b:02:28:7b:
         15:a8:a3:19:ed:af:f7:28:73:d9:64:02:56:e3:4d:04:f7:dc:
         e7:5e:04:da:49:3c:40:47:d5:e1:1e:4b:0c:76:d4:23:cc:eb:
         3f:ed:ad:27:82:d7:e0:1a:1c:51:48:e3:61:36:30:76:c1:6b:
         fa:b3:97:fc:31:42:fd:d8:87:18:ce:8f:5d:1d:fc:0a:bf:5b:
         7f:d3:6d:b5:e9:36:3f:37:9f:5d:cb:cb:56:36:51:71:2a:88:
         01:3b:7a:65:a0:2d:99:e7:6f:97:24:f9:84:39:9a:83:7c:34:
         f8:ee:66:af:d8:3e:98:52:9c:d9:a2:e6:e8:9a:72:fc:4e:d5:
         60:e5:04:78:fb:13:bc:33:65:0a:8d:63:a9:e1:e0:72:f9:aa:
         2f:d1:ea:ae:8d:fe:49:a9:f7:87:c8:cd:0f:1b:af:28:24:15:
         b4:12:48:cf:21:c5:e2:1b:7e:98:a2:20:95:3f:61:58:16:02:
         69:b5:41:ce:5f:23:13:02:aa:b4:fb:c1:23:5a:8e:2d:05:44:
         07:a4:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----